GXPN試験無料問題集（160題）「GIAC Exploit Researcher and Advanced Penetration Tester 認定」

出題：1

Which two scenarios commonly require packet crafting during a penetration test?
(Choose Two)
Response:

A. Conducting a TCP SYN flood

B. Testing SQL injection vulnerabilities

C. Bypassing firewall rules

D. Writing a shellcode payload

正解：A,C 解答を投票する

出題：2

How do DEP (Data Execution Prevention) and ASLR (Address Space Layout Randomization) complicate exploitation of Windows stack overflows?
Response:

A. ASLR randomizes the addresses of stack, heap, and libraries

B. Both mechanisms encrypt data on the stack

C. DEP prevents execution of code from non-executable memory regions

D. They reduce the efficiency of garbage collection

正解：A,C 解答を投票する

出題：3

During a penetration test, you want to exploit a network vulnerability to intercept and modify client traffic. Which method would you use?
Response:

A. Execute a cross-site request forgery (CSRF) attack

B. Perform a buffer overflow attack on the router

C. Attempt a brute-force attack on the SSH service

D. Use ARP poisoning to redirect traffic through your machine

正解：D 解答を投票する

出題：4

You need to craft and send a custom ICMP echo request packet to test network devices. Which of the following Python/Scapy commands would you use?
Response:

A. packet("icmp", destination="192.168.1.1")

B. send_ping("192.168.1.1")

C. send(IP(dst="192.168.1.1")/ICMP())

D. send_icmp_request("target=192.168.1.1")

正解：C 解答を投票する

出題：5

Which two memory protection mechanisms are commonly encountered in Windows stack overflow exploits?
(Choose Two)
Response:

A. ASLR (Address Space Layout Randomization)

B. DEP (Data Execution Prevention)

C. ROP gadgets

D. NX bit

正解：A,B 解答を投票する

出題：6

During a penetration test on a Windows system, you identify a potential stack overflow vulnerability. Which technique would you apply to bypass DEP and execute your payload?
Response:

A. Use ARP spoofing to manipulate network traffic

B. Use a NOP sled to align the stack

C. Inject shellcode directly into the stack

D. Apply Return-Oriented Programming (ROP) to execute code without violating DEP

正解：D 解答を投票する

出題：7

When using the Sulley framework for fuzzing, what is an effective strategy to improve code coverage?
Response:

A. Using more precise and context-aware test cases

B. Focusing testing on stable software components

C. Increasing the payload size indiscriminately

D. Decreasing the duration of each test case

正解：A 解答を投票する

出題：8

Which of the following methods are effective for bypassing network segmentation in enterprise environments?
(Choose Two)
Response:

A. VLAN hopping

B. SSL/TLS stripping

C. DNS cache poisoning

D. Route injection attacks

正解：A,D 解答を投票する

出題：9

You are trying to exploit a buffer overflow vulnerability on a Linux system with stack canaries and ASLR enabled. Which approach would be most effective in bypassing these protections?
Response:

A. Crafting a simple buffer overflow payload with shellcode

B. Using a large NOP sled and relying on predictable addresses

C. Writing a format string exploit to overwrite arbitrary memory

D. Brute-forcing the stack canary and leveraging a return-to-libc technique to bypass ASLR

正解：D 解答を投票する

出題：10

Which two Windows memory protection mechanisms are commonly bypassed during exploitation?
(Choose Two)
Response:

A. Structured Exception Handling (SEH)

B. Stack canaries

C. Address Space Layout Randomization (ASLR)

D. NX bit

正解：C,D 解答を投票する

出題：11

In Scapy, what function is used to send packets at the network layer?
Response:

A. transmit()

B. sendp()

C. send()

D. dispatch()

正解：C 解答を投票する

出題：12

How does understanding assembly language benefit a penetration tester working with Linux systems?
Response:

A. It enables the tester to directly manipulate hardware features.

B. It allows the tester to write more effective user documentation.

C. It aids in the analysis and exploitation of binary vulnerabilities.

D. It facilitates the development of graphical interfaces.

正解：C 解答を投票する

出題：13

What is a typical use case for the sr1() function in Scapy?
Response:

A. To visualize packet flow

B. To send a packet and receive its answer

C. To log packet data to a file

D. To generate random packet data

正解：B 解答を投票する

出題：14

What is a common method for escaping a restricted Windows environment during client exploitation?
Response:

A. Using remote desktop protocol (RDP)

B. Exploiting PowerShell execution policies

C. Performing SQL injection

D. Spoofing ARP requests

正解：B 解答を投票する

出題：15

In a buffer overflow attack, what part of the stack is typically targeted to gain control of execution flow?
Response:

A. Return address

B. Frame pointer

C. Stack pointer

D. Heap

正解：A 解答を投票する

GXPN試験無料問題集「GIAC Exploit Researcher and Advanced Penetration Tester 認定」